V5 Ultimate
Consumer Products · How V5 Runs

How V5 Ultimate runs a consumer products plant, end to end.

Eleven build touchpoints — supplier to serial-level recall — sharing one immutable ledger. Mapped to CPSC 16 CFR, EU GPSR 2023/988, UK GPSR, RoHS, REACH SVHC, Prop 65, ISO 9001:2015, IEC 62368-1, GS1 Digital Link and (where required) 21 CFR Part 11.

Start free trial
CPSC 16 CFREU GPSR 2023/988UK GPSRRoHSREACHProp 65ISO 9001IEC 62368-1GS1
ONE IMMUTABLE LEDGERCPSC · GPSR · RoHS · REACH · Prop 65 · ISO 9001 · IEC 62368-1 · GS101SupplierRoHS + REACH02ReceiveAQL + XRF03eBOM lockECO controlled04Assemblesmart-tool stream05TestICT / AOI / FCT06Pack + labelGPSR + Prop 6507ShipASN + serialThe evidence chainEvery action signs the ledger — nothing is re-keyed at the end.
Executive summary

One ledger, every touchpoint — supplier to serial-level recall in seconds.

V5 Ultimate runs a consumer-products plant as one connected system. Receiving with RoHS/REACH gates, eBOM under ECO control, kiosk-led assembly with smart-tool streams, serialization at the right step, ICT/AOI/FCT bound to the serial, GPSR-compliant labelling, GS1 Digital Link, and the entire ISO 9001 QMS all write to the same immutable, identity-verified ledger.

The pay-off is operational: build records reviewed by exception, CPSC Fast-Track and GPSR Safety Gate notifications supported as queries, and a recall that resolves to specific serials — not 'pull every unit in the channel'.

This playbook walks you through 11 traceability touchpoints and the 16 quality-system modules that wrap them, grouped into 8 readable parts.

11
Build touchpoints
8
Thematic parts
30+
Regulatory anchors
Part I

Foundations

Why consumer-product traceability is a recall hedge, and the ten-node map.

01

Why consumer-product traceability is the recall hedge

A CPSC Fast-Track recall, a GPSR Safety Gate notification or an Amazon recall pull is decided in days, not weeks — and the regulator's first question is always 'which units, where?'

Floor actionscan · weigh · e-sigactor + tsSTEP 01Append-only rowDB trigger writes oncesha256STEP 02Build record snapshotfrozen at releaseWO boundSTEP 03PDF renderfrom snapshot onlydeterministicSTEP 04Inspector packexported on demand21 CFR 11STEP 05ALCOA+ lineageAttributable · Legible · Contemporaneous · Original · Accurate · + Complete · Consistent · Enduring · AvailableOne origin event. No re-keying. No reconciliation.
ALCOA+ in one picture: one origin event, replayable downstream.

Consumer-product manufacturers live under a stack of overlapping obligations: 16 CFR (CPSIA, CPSA, FHSA, PPPA) in the US, the new EU General Product Safety Regulation (GPSR 2023/988) that took effect 13 December 2024, UK GPSR (SI 2005/1803), Prop 65 warnings for California sales, RoHS for electricals (EU 2011/65/EU and UK equivalent), REACH SVHC obligations, and customer-imposed conformance (Amazon, big-box retailer testing protocols, JET, IKEA QPP).

What ties them together is unit-level traceability. Every product carries a serial or carton GTIN that points back to a build record: which sub-assembly, which component lot, which firmware revision, which functional-test result, which packaging line, which carton, which pallet, which distribution centre. Without that thread, a recall becomes 'pull every unit on the shelf' — at 5–50× the cost.

V5 Ultimate treats every component lot, every assembly step, every test result, every packaging carton and every distribution movement as part of the same immutable ledger. Recall is a query. Restricted-substance compliance is bound to the part — not to a spreadsheet that drifts.

Regulatory anchors
  • EU GPSR 2023/988General Product Safety Regulation — applies from 13 Dec 2024
  • 16 CFR Part 1115CPSC substantial product hazard reports (Section 15(b))
  • ISO 9001:2015 §8.5.2Identification and traceability
02

The end-to-end traceability chain at a glance

Ten touchpoints, one record. Read left-to-right. Every node writes to the same immutable ledger.

  1. 01
    Supplier
  2. 02
    Receive
  3. 03
    Warehouse
  4. 04
    eBOM lock
  5. 05
    WO release
  6. 06
    Assemble
  7. 07
    Serialize
  8. 08
    Test
  9. 09
    NCR / CAPA
  10. 10
    Pack + label
  11. 11
    QA release
One immutable ledger underneath. Every node writes; nothing is re-keyed.

Every node carries forward supplier lot, work order, operator, equipment, serial/GTIN and restricted-substance context from the node before it. Nothing is re-keyed at packaging.

Part II

Materials in

Supplier qualification, restricted-substance compliance, receiving with serial/lot capture.

03

Touchpoint 1 — Supplier onboarding and qualification

A non-compliant capacitor lot from a sub-tier supplier becomes a 1.2 M-unit recall. Onboarding is where it gets stopped.

V5 holds every supplier as a structured object: scope by part × site, signed quality agreement, RoHS / REACH SVHC declarations per part, Prop 65 declarations where applicable, conflict-minerals (CMRT) status, ISO 9001 certificate, factory audit report and remediation history.

Re-qualification is calendar-driven and portal-led. An expired RoHS declaration blocks goods-in automatically. A supplier whose factory audit lapsed cannot be assigned to a new PO until the file is current. Risk scoring drives the depth of incoming inspection.

  • RoHS / REACH SVHC declarations held per part, not per supplier
  • Conflict-minerals (CMRT) status tracked against the BOM
  • Factory audits and CAPAs visible to the buyer at PO time
  • Approved-supplier list filterable by part × site × certificate-status
Regulatory anchors
  • EU 2011/65/EU (RoHS)Restriction of hazardous substances in EEE
  • EU 1907/2006 (REACH)Substances of Very High Concern — Art. 33 communication
  • ISO 9001:2015 §8.4Control of externally provided processes, products and services
04

Touchpoint 2 — Receiving, lot/serial capture, AQL inspection, quarantine

Every reel, every carton, every drum: scanned, AQL-sampled, photographed, and locked to Quarantine until released.

The receiver scans the ASN, weighs against PO, captures the supplier lot or date-code and quantity, and photographs condition. V5 mints a goods-receipt lot ID at that moment. AQL sampling (ANSI/ASQ Z1.4 plans) runs on the same kiosk — dimensional, visual, functional, sometimes destructive — with results linked to the receipt lot, instrument and inspector e-signature.

High-risk parts (safety-critical components, restricted-substance candidates) trigger automatic XRF screening for restricted elements (Pb, Cd, Hg, Cr⁶⁺, Br/Cl for plastics). XRF results bind to the receipt lot.

  • Goods-receipt lot ID minted at the dock
  • AQL sampling plan auto-selected from part-class risk
  • XRF screen for RoHS-restricted elements on flagged parts
Regulatory anchors
  • ANSI/ASQ Z1.4Sampling Procedures and Tables for Inspection by Attributes
  • ISO 9001:2015 §8.6Release of products and services
05

Touchpoint 3 — Warehouse with status-aware FEFO/FIFO

Bins are not just locations. They are zones with part-class profile, ESD status, restricted-substance state and release status.

V5 maintains bin attributes: ESD-protected, humidity-controlled (for MSL components per J-STD-033), restricted-substance profile, temperature band. The pick list shown to the picker only includes bins compatible with the work order — a non-RoHS reel cannot be picked into a RoHS-destined build. FIFO/FEFO is enforced; overrides require reason + dual e-sig.

  • Pick list filtered by RoHS / REACH / market compatibility with the WO
  • J-STD-033 MSL exposure-time tracked for moisture-sensitive components
  • Parent/child genealogy carried through every sub-assembly
Regulatory anchors
  • IPC/JEDEC J-STD-033Handling, packing, shipping and use of moisture-sensitive devices
  • ISO 9001:2015 §8.5.4Preservation
Part III

Engineering & build

BOM/eBOM lock with ECO control, work-order snapshot, kiosk-led assembly and serialization.

06

Touchpoint 4 — eBOM lock with ECO control

The engineering BOM is a regulated object. In V5 it's a versioned, signed, machine-readable record — every change goes through an Engineering Change Order.

Each eBOM revision holds: parts list with RoHS / REACH / conflict-minerals status per line, routing with step-by-step work instructions, in-process control plan (torque values, functional-test specs, ICT/AOI thresholds), firmware revision, packaging routing, locked label and warning artwork. The ECO carries cost / safety / regulatory impact, approvers from engineering, quality, regulatory, manufacturing and procurement, and an effectivity date or serial-break.

New work orders pick up the new revision; in-flight WOs keep the snapshot they were released against — no mid-build drift.

  • ECO captures regulatory impact (RoHS / REACH / safety-cert) as a structured field
  • Effectivity is serial-break or date — operators see only the controlled revision
  • Firmware revision bound to the eBOM and to each serialized unit
  • Label and warning artwork (Prop 65, CE/UKCA marks, age-grading) locked to eBOM
Regulatory anchors
  • ISO 9001:2015 §8.3.6Design and development changes
  • ISO 10007:2017Configuration management guidelines
07

Touchpoint 5 — Work-order release as a snapshot

Releasing a work order takes a snapshot of the eBOM, the work instructions and the test plan. From that moment the build carries its own copy — frozen forever.

eBOM v3.2BOM · Routing · IPCSpec · LabelEFFECTIVE · 2-SIGSNAPon releaseWO-2026-0418Bound to eBOM v3.2Frozen at releaseRELEASED · sha256:a4f9…runs even ifeBOM revisesBuild record (this batch)Filled by kiosk+ IPC + dev + sigsIMMUTABLEeBOM v3.3 (later revision)does NOT affect WO-2026-0418
The WO carries a frozen copy of eBOM v3.2. Later revisions don't disturb this batch.

If the eBOM is revised mid-shift, the work order keeps the snapshot it was released against. The auditor — or the customer's quality engineer chasing a field failure — sees exactly the configuration this unit was built to, with the sha256 of the snapshot recorded against release.

Regulatory anchors
  • ISO 9001:2015 §7.5.3Control of documented information
  • 21 CFR Part 11Where customer or vertical demands electronic-record integrity
08

Touchpoint 6 — Kiosk-led assembly and serialization

The kiosk is the floor's single pane of glass. Every torque, every test, every serialization event is signed and timestamped.

Each operation step shows the work instruction (text, image, video), the parts to scan, the tool to use, and the expected result. Smart torque drivers, screwdrivers, presses and ICT/AOI/FCT testers stream readings directly into the kiosk — under-torque, missed step or failed test trips an in-process deviation and locks the unit.

Serialization happens at the right step: a UID or GS1 GTIN+serial is minted, printed and verified by camera. From that moment, every downstream event is bound to the serial: firmware flash, calibration, functional test, packaging carton, pallet, ASN.

  • Smart-tool stream — no key-in for torque or test readings
  • Pokayoke: wrong part = scanner rejects, kiosk hard-stops
  • Serial minted and verified at assembly; bound to firmware revision
  • Operator competency gate — untrained = locked out of the step
Regulatory anchors
  • GS1 General SpecificationsGTIN, serial number, GS1-128, Digital Link
  • ISO 9001:2015 §8.5.1Control of production and service provision
09

Touchpoint 7 — In-process and finished-product test

ICT, AOI, FCT, burn-in, hi-pot, ESD, ISTA transit testing — all scheduled by the work order, all results bound to the serial.

Sampling plans (100% for safety-critical tests; AQL for cosmetic) run on a schedule, not a reminder. Test fixtures send pass/fail and parametric data to the same kiosk. OOS auto-opens a deviation, holds the serial, and notifies QA. Trending across serials surfaces drift before it becomes scrap.

Regulatory anchors
  • IEC 62368-1Audio/video, ICT and CE equipment — safety requirements
  • ISTA 3A / 6-Amazon-OBTransit testing — performance / Amazon SIOC / FFP
Part IV

Quality events

NCRs, field failures, deviations, CAPA — one queue, recall-ready.

10

Touchpoint 8 — Deviations, NCRs and CAPA in one queue

Every quality event lands in the same queue — supplier reject, in-process fail, field complaint, safety event.

A single register categorises by event type and severity. Root-cause uses 5-Why and Ishikawa templates with structured fields. CAPAs link to the deviation, affected serials, operators, equipment, complaints, and (where applicable) the CPSC Section 15(b) report or GPSR Safety Gate notification.

Regulatory anchors
  • ISO 9001:2015 §10.2Nonconformity and corrective action
  • 16 CFR Part 1115Substantial product hazard reports — 24-hour reporting
Part V

Pack to consumer

Carton labels, warnings, GS1/GTIN, QA release, recall in seconds.

11

Touchpoint 9 — Packaging, warnings and GS1 hierarchy

The carton is a regulated document. V5 prints from the eBOM — never from a Word document.

Mandatory marks (CE, UKCA, FCC, WEEE crossed-bin), age-grading (ASTM F963 toy-safety where applicable), Prop 65 warnings for California sales, recycling marks, country-of-origin, importer block (required by GPSR Art. 9), e-commerce information (required by GPSR Art. 19), GS1 GTIN/serial — all printed from the controlled record.

Each carton aggregates units; each pallet aggregates cartons; each ASN aggregates pallets. The GS1 Digital Link on the unit / carton resolves to the manual, the conformity declaration and the spare-parts catalogue — meeting GPSR's digital-information requirement.

  • Prop 65 warning printed when destination = California — auto
  • GPSR Art. 9/19 importer & contact details printed from product master
  • GS1 Digital Link resolves to manual, DoC and spare parts
Regulatory anchors
  • EU GPSR 2023/988, Art. 9 & 19Manufacturer / importer / e-commerce information obligations
  • Cal. Health & Safety §25249.6Prop 65 — clear and reasonable warnings
  • GS1 Digital LinkStandard for resolving GTIN to product information
12

Touchpoint 10 — QA release with review-by-exception

QA reviews the exceptions, not the entire build record. The ledger already proves the routine steps happened.

Review-by-exception is only safe if the record is complete and immutable. V5's build record is assembled from the ledger as the line runs. The QA reviewer's queue surfaces only items the system can't auto-clear: deviations open, test OOS, serialization gaps, expired training. Release requires two qualified e-signatures, both identity-verified, both bound to the snapshot.

Regulatory anchors
  • ISO 9001:2015 §8.6Release of products and services
13

Touchpoint 11 — Distribution and recall in seconds

Recall is a query, not a project. Forward from a component date-code, backward from a serial in a consumer's hands.

Recall / withdrawal lookback timelineFrom trigger to drafted regulator report — measured in minutes, not weeksT+0sRecall triggerQA flips serials to RecallSTEP 01T+10sBackward traceComponent date-code · ECOSTEP 02T+38s100% serials foundCarton · pallet · DC · consumerSTEP 03T+1m 50sCustomers notifiedPortal + retailer + registered owner pushSTEP 04T+8mCPSC 15(b) draftedAuto from ledgerSTEP 05Bidirectional from any node — unit ⇄ case ⇄ pallet ⇄ batch ⇄ lot ⇄ supplier
One ledger, one query. Forward and backward from any node.

Every carton ships against an ASN that carries serials. When a recall trigger fires — internal QA disposition, CPSC Fast-Track, GPSR Safety Gate notification, retailer pull — V5 walks the ledger in both directions in seconds: every serial built with this component lot, every carton it shipped in, every DC and retailer that received it, every consumer who registered the product.

The CPSC Section 15(b) report (US), Safety Gate notification (EU), OPSS notification (UK), recall press release draft, and the regulator response file all assemble from the same ledger.

Regulatory anchors
  • 16 CFR Part 1115CPSC substantial product hazard reports
  • EU GPSR 2023/988, Art. 35Safety Gate — Rapid Alert System for non-food products
  • UK GPSR (SI 2005/1803)Notification to OPSS / market surveillance
Part VI

Quality system

ISO 9001 QMS, documents, training, management review, audits.

14

Quality system — ISO 9001 as a live object

ISO 9001 lives as a structured, signed, live record — not as a binder pulled out before the certification audit.

Context of the organisation, interested parties, scope, processes, risks and opportunities, objectives — all live in V5 as structured records. Management review pulls automatically from the ledger.

Regulatory anchors
  • ISO 9001:2015Quality management systems — requirements
15

Document control — controlled, versioned, two-signature

Every SOP, work instruction, drawing, test method and policy is a controlled record.

Draft → Review → Approved → Effective → Periodic Review → Superseded / Retired. Two qualified signatures effect every release. Operators see only the effective revision; superseded revisions are retained per ISO 9001 §7.5.

Regulatory anchors
  • ISO 9001:2015 §7.5Documented information — create, update, control
16

Training and competency — competency-gated kiosk access

If you're not trained on the assembly step, the kiosk won't let you start it.

V5 maintains a training matrix per role × line × work-instruction revision. When a work instruction revises, affected operators are auto-reassigned; the kiosk locks them out of the step until the new training is signed.

Regulatory anchors
  • ISO 9001:2015 §7.2Competence
17

Management review — assembled continuously, signed annually

Management review is not a 4-week scramble. V5 assembles it continuously from the ledger.

Management Review — continuous compilationEvery batch, IPC, OOS, deviation and complaint feeds the review as it happensJanbatch · IPCFebbatch · IPCMarbatch · IPCAprbatch · IPCMaybatch · IPCJunbatch · IPCJulbatch · IPCAugbatch · IPCSepbatch · IPCOctbatch · IPCNovbatch · IPCDecbatch · IPCManagement ReviewTrends · CpK · OOS · CAPAStability · Complaints · PVISO 9001:2015 §9.3CpK trend chartOOS / CAPA registerStability projectionSigned review PDF
Management Review assembles continuously — not a 4-week scramble at year end.

Every batch's quality signals, every CAPA, every supplier scorecard, every internal-audit finding, every customer complaint, every field-failure rate — all stream into the management-review workspace as they happen.

Regulatory anchors
  • ISO 9001:2015 §9.3Management review
18

Internal audits, customer 2nd-party and certification audits

Audits land in the same queue as deviations. Findings drive CAPAs; CAPAs drive effectiveness checks.

V5's audit module schedules internal audits and external audits (ISO 9001 certification, customer 2nd-party — Amazon, IKEA QPP, big-box). When a CPSC investigator or EU market-surveillance officer arrives, the request list — DoCs, technical files, test reports, the last three months of build records — is a query, assembled and printable in minutes.

Regulatory anchors
  • ISO 9001:2015 §9.2Internal audit
  • EU GPSR 2023/988, Art. 9Technical documentation — 10-year retention
Part VII

Risk & operations

Hazard analysis, restricted substances, test labs, equipment & calibration, complaints.

19

Risk, hazard analysis and ISO 14971 overlap

Consumer-product risk analysis borrows heavily from the medical-device ISO 14971 toolkit for safety-critical lines (children's, electrical, motorised).

Hazards are identified by category (mechanical, electrical, chemical, thermal, choke, strangulation), with severity × probability scoring, design and protective controls, residual-risk acceptance, and post-market surveillance feedback loops.

Regulatory anchors
  • ISO 14971:2019Risk management — medical devices (used as best-practice for consumer safety)
  • ASTM F963Standard Consumer Safety Specification for Toy Safety
20

Restricted-substance programme — RoHS, REACH, Prop 65

Restricted-substance compliance is bound to the part and refreshed on a calendar — not chased once a year by a procurement intern.

Each part has an active RoHS declaration, an active REACH SVHC declaration (Art. 33 communication is automatic to downstream customers when a new SVHC is added to the candidate list), conflict-minerals status, and Prop 65 listed-chemical screen. XRF screening on receipt, third-party CPSIA test reports per CPC/GCC where applicable.

Regulatory anchors
  • EU 2011/65/EU (RoHS)Restriction of hazardous substances
  • EU 1907/2006 (REACH) Art. 33SVHC notification — supplier and consumer communication
  • CPSIA 16 CFR 1107Testing and labelling — CPC / GCC requirements
21

Test labs and third-party reports

Every required test — CPSIA, IEC 62368-1, FCC, ISTA, sound-pressure, age-grading — has a report. V5 holds them and binds them to the eBOM revision they validated.

Reports come from in-house lab (ISO/IEC 17025 where accredited) or third party (UL, TÜV, Intertek, SGS, Bureau Veritas). Each is bound to part / eBOM revision / serial range, has a validity period, and an ECO-impact flag — if the part changes, the test may need to repeat.

Regulatory anchors
  • ISO/IEC 17025General requirements for the competence of testing and calibration laboratories
22

Equipment and calibration — torque, test, scales, fixtures

Every instrument that gates a build step has a calibration schedule and an out-of-tolerance procedure.

Torque drivers, ICT/AOI/FCT testers, hi-pot testers, scales, fixtures, calibration masters — each is a tracked asset with calibration interval, certificate, tolerance, and an out-of-tolerance impact-assessment that triggers a back-look across every serial built since the last passing calibration.

Regulatory anchors
  • ISO 9001:2015 §7.1.5Monitoring and measuring resources
23

Complaints — every complaint links to a serial

A complaint without a serial is a complaint and a future recall. V5 ties it on intake.

Intake captures serial, GTIN, date-code, place of purchase, failure mode, injury severity. V5 binds the complaint to the build record, surfaces adjacent serials that share components or equipment, and trips a deviation if pattern crosses a threshold. The CPSC Section 15(b) clock (24h) starts at the first credible safety signal.

Regulatory anchors
  • 16 CFR Part 1115Substantial product hazard reports — 24-hour rule
  • EU GPSR 2023/988, Art. 20Accidents reporting via Safety Business Gateway
Part VIII

Compliance & onboarding

Part 11 (where required), customer surface, onboarding, regulatory matrix.

24

21 CFR Part 11 — when customer or vertical demands it

For lines feeding medical or pharma customers, Part 11 is mandatory. V5 supports it natively.

Every signed event carries the actor's verified identity, signature meaning, time, and a sha256 of the record. The signature row is append-only. PDF renders are deterministic from the snapshot.

Regulatory anchors
  • 21 CFR Part 11Electronic records and signatures
25

Customer experience — registration, DoC, manual on Digital Link

Consumers and retailers query the ledger through the GS1 Digital Link on the carton.

Product registration, EU/UK Declaration of Conformity, manuals, spare-parts catalogue, recall status — all on the portal. Audit-trail of who downloaded what is automatic.

26

Onboarding and support — weeks, not months

V5 ships pre-configured for a typical consumer-products plant: ISO 9001 templates, RoHS / REACH register, GS1 Digital Link, ASTM/IEC test-method library.

A typical plant onboards in 4–8 weeks: master data import (parts, eBOMs, routings), supplier compliance file migration, kiosk training, parallel-run validation, cutover.

27

Regulatory matrix — every clause, every touchpoint

Where every clause lands in the V5 product surface.

Abbreviated mapping. Each link opens the full readiness guide.

RegulationScopeTouchpointsGuide
EU GPSR 2023/988General Product Safety Regulation11, 13, 18
16 CFR Part 1115CPSC substantial product hazard reports — Section 15(b)10, 13, 23
16 CFR Part 1107CPSIA testing and labelling — CPC requirements11, 20, 21
EU 2011/65/EU (RoHS)Restriction of hazardous substances in EEE03, 04, 20
EU 1907/2006 (REACH)SVHC obligations and Art. 33 communication03, 20
Cal. Prop 65Clear and reasonable warnings11, 20
ISO 9001:2015Quality management systems — requirementsAll
ISO 10007:2017Configuration management guidelines06, 07
IEC 62368-1AV / ICT / CE equipment — safety requirements09, 21
GS1 General SpecsGTIN, serial, GS1-128, Digital Link08, 11, 13
21 CFR Part 11Electronic records and signatures (where required)07, 08, 12Read →

See the playbook running on your floor.

Free trial, no credit card, onboard in days, not months.